atmos-starlark
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
dependencies.toolsfunction downloads and installs binaries from external repositories. Theconfig.loadfunction supports fetching JSON schemas from HTTPS URLs. - [COMMAND_EXECUTION]: The skill provides extensive APIs for shell command and Atmos CLI execution, including
exec.run,component.exec, andatmos.*wrappers. - [DYNAMIC_EXECUTION]: The Starlark
load()andmodule.load()functions allow for dynamic loading and execution of Starlark code from the file system. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Ingests data from
ctx.flags,ctx.arguments,ctx.args, environment variables (env), and resolved component configurations viacomponents.get. - Boundary markers: No automated boundary markers are provided for input data.
- Capability inventory: Includes execution of shell commands (
exec.run), Atmos commands (atmos.*), file writes (fs.write_file), and tool installations (dependencies.tools). - Sanitization: No automatic sanitization is applied to input data; the documentation recommends using structured inputs over manual string templating.
Audit Metadata